Securing user interfaces of a computing cluster

A method comprising:

• receiving first user credentials of a first user from a first user device;
• comparing the first user credentials to stored user credentials for the first user;
• in response to the first user credentials matching the stored user credentials for the first user, authenticating the first user;
• determining a first group of the first user based on the first user credentials;
• sending the first group to a computing cluster;
• in response to sending the first group, receiving first access information for the first user from the computing cluster, wherein the first access information comprises a first set of uniform resource locators (URLs) associated with the first group, and wherein each URL of the first set of URLs corresponds to a respective user interface (UI) of the computing cluster that is accessible to the first group;
• generating a first authentication token based on the first user credentials and the first access information;
• sending a first copy of the first authentication token to the first user device;
• sending a second copy of the first authentication token to the computing cluster;
• assigning the first copy of the first authentication token to a first session variable of a first browser application of the first user device;
• inputting a first URL into the first browser application to attempt accessing a first UI of the computing cluster;
• sending the first URL and the first session variable to the computing cluster;
• comparing the first session variable to the second copy of the first authentication token;
• in response to the first session variable matching the second copy of the first authentication token, comparing the first URL to the first set of URLs;
• and
• in response to the first URL being one of the first set of URLs and the first session variable matching the second copy of the first authentication token, accessing the first UI of the computing cluster using the first browser application.

A non-transitory computer-readable medium storing instructions that, when executed by one or more processors, cause the one or more processors to:

• receive first user credentials of a first user from a first user device;
• compare the first user credentials to stored user credentials for the first user;
• in response to the first user credentials matching the stored user credentials for the first user, authenticate the first user;
• determine a first group of the first user based on the first user credentials;
• send the first group to a computing cluster;
• in response to sending the first group, receive first access information for the first user from the computing cluster, wherein the first access information comprises a first set of uniform resource locators (URLs) associated with the first group, and wherein each URL of the first set of URLs corresponds to a respective user interface (UI) of the computing cluster that is accessible to the first group;
• generate a first authentication token based on the first user credentials and the first access information;
• send a first copy of the first authentication token to the first user device;
• send a second copy of the first authentication token to the computing cluster;
• assign the first copy of the first authentication token to a first session variable of a first browser application of the first user device;
• input a first URL into the first browser application to attempt accessing a first UI of the computing cluster;
• send the first URL and the first session variable to the computing cluster;
• compare the first session variable to the second copy of the first authentication token;
• in response to the first session variable matching the second copy of the first authentication token, compare the first URL to the first set of URLs;
• and
• in response to the first URL being one of the first set of URLs and the first session variable matching the second copy of the first authentication token, access the first UI of the computing cluster using the first browser application.